Privacy Policy

Last updated: August 11, 2026

1. What we collect

  • Account data: email, authentication identifiers (via Supabase Auth), and, if you sign in anonymously, a device-linked anonymous ID.
  • Chat content: messages you send to characters and the responses generated, stored so conversations persist across sessions.
  • Purchase data: token purchases and subscription status, processed through our payment provider (we do not store full card numbers).
  • Usage data: device/browser type, IP address, and interaction logs for security, reliability, and product improvement.

2. How we use it

  • To operate chat, generate responses, and maintain conversation history.
  • To process payments and manage your token/subscription balance.
  • To secure the service (fraud/abuse detection, enforcing our Terms of Service).
  • To improve the product through aggregated, de-identified operational metrics where appropriate.

We do not sell your personal data.

3. Who we share it with

We share data only with service providers necessary to run Plumm: our database/auth provider (Supabase), the AI model providers that generate character responses, our payment processor, and hosting infrastructure (Vercel). These providers are contractually restricted to using your data only to provide the service to us. We may also disclose data if required by law or to protect the rights and safety of Plumm or its users.

4. Chat content and AI providers

Messages you send are transmitted to third-party AI model providers to generate character responses. These providers process message content under their own data-processing terms; we select providers that commit to not using API-submitted content to train their general-purpose models where such an option is available.

5. Data retention

Chat history is retained while your account is active so conversations persist. If you delete your account, we delete or anonymize your personal data and chat content within 30 days, except where we must retain records (e.g. payment records) to comply with legal, tax, or fraud-prevention obligations.

6. Your rights

Depending on where you live (e.g. under GDPR or CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Request this any time at privacy@plummai.com.

7. Cookies

We use essential cookies/local storage to keep you signed in and remember preferences. Optional analytics and marketing tools are currently inactive. See our Cookie Policy for detail.

8. Age restriction

Plumm is intended for users 18 and older. We do not knowingly collect data from minors; if we learn an account belongs to a minor we will delete it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app or by email before they take effect.

10. Contact

This document is a general template and does not constitute legal advice. Review with qualified counsel, especially for GDPR/CCPA compliance and your specific AI-provider data-processing agreements, before relying on it.